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START A METHOD FOR EVALUATING THE SCOPE\ 




0 



THE METHOD CREATES ACCESS SCOPES FOR 
CONTENTS (SEE FIGS. 4B-4E) 



©> 



© 



THE METHOD CREATES USERS OR ROLES AND 
CAUSES USERS OR ROLES TO INHERIT FROM. 
ACCESSORS SO AS TO GAIN THE CAPABILITY 
OF ACCESSING CONTENTS (SEE FIGS. 4F-4G) 
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THE METHOD GRANTS OR DENIES AN ACCESS 
REQUEST BY EVALUATING ACCESS SCOPE 
SENTENCES (SEE FIGS. 4H-4K) 
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FINISH 
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400 



A CONTENT DEVELOPER 
CREATES PIECES OF CONTENT, 
SUCH AS SOFTWARE LICENSES 




AN ACCESS DIMENSION (SUCH AS SALES 
LOCATION) IS CREATED FOR THESE 
PIECES OF CONTENT 
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ACCESS MEMBERS (SUCH AS UNITED STATES, CHINA, 
GERMANY, AND RUSSIA) BELONGING TO THE 
ACCESS DIMENSION ARE FLESHED OUT 
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FigAC. 



NO 



THE METHOD CREATES A SECURITY SPACE FROM THE 
CREATED ACCESS DIMENSIONS, CORRESPONDING ACCESS 
MEMBERS AND ACCESS LEVELS FOR PIECES OF THE CONTENT 
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TO BEGIN EXPRESSING THE ACCESS SCOPE FOR A 

PIECE OF CONTENT, AN A CCESS EXTENT IS 
FORMED BY SELECTING AN ACCESS DIMENSION 
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ONE OR MORE ACCESS MEMBERS OR 
ACCESS LEVELS OF THE SELECTED 
ACCESS DIMENSION ARE CHOSEN 
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428 



LOGICALLY 
REMOVE AN ACCESS 
MEMBER FROM AN 
^ACCESS LEVEL?, 
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THE METHOD TEXTUALLY INSERTS A 
MINUS SIGN "-" IN FRONT OF AN 
ACCESS MEMBER 
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THE METHOD 
FORMS A LIST OF 
ACCESS MEMBERS 
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THE METHOD TEXTUALLY INSERTS 
THE WORD "NOT" IN FRONT OF THE 
LIST OF ACCESS MEMBERS 
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NO 



THE METHOD TEXTUALLY INSERTS A SET SPECIFICATION ("ALL" 
OR "ANY") IN FRONT OF THE LIST OF ACCESS MEMBERS (OR IN 
FRONT OF THE WORD "NOT" IF PRESENT) 
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THE METHOD TEXTUALLY INSERTS THE DESIGNATION OF 

THE SELECTED ACCESS DIMENSION (E. G., 
"SALESLOCATION") IN FRONT OF THE SET SPECIFICATION 
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SELECTED ACCESS DIMENSION 



THE FORMATION OF THE ACCESS 
EXTENT IS COMPLETED TO DEFINE 
AN ACCESS SCOPE SENTENCE 
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-448 



DOES THE 
ACCESS SCOPE 
^REQUIRE ADDITIONAL^ 
iCCESS EXTENTS?* 



YES 



A SET OPERATION ("AND" OR "OR") 
IS SELECTED AND IS PLACED AFTER 
THE CREATED ACCESS EXTENT 
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FigAF. 



USERS, ROLES, OR 
BOTH ARE CREATED 
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AN ACCESSOR IS CREATED AND THE 
USERS AND ROLES ARE CAUSED TO 
INHERIT FROM THE ACCESSOR 
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THE ACCESS SCOPE OF THE ACCESSOR IS EXPRESSED 
USING PROCESSING STEPS BETWEEN CONTINUATION 
TERMINALS A4, B TO CREATE AN ACCESS SCOPE SENTENCE 
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YES 




NO 



THE METHOD CONSTRUCTS EXPLICIT 
ACCESS SCOPE SENTENCES IMPLIED BY TWO 
OR MORE ACCESS SCOPE SENTENCES 
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FigAG. 
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YES 

J_ 



THE METHOD TRANSLATES EACH SELECTED ACCESS 
DIMENSION IN THE ACCESS SCOPE SENTENCE INTO A 
BINARY PHRASE INBASE-2 (E.G., A BIT MASK) 
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NO 
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J 



THE METHOD COMPILES THE ACCESS SCOPE SENTENCE IN 
BASE-2 USING THE TRANSLATED BINARY PHRASES ALONG WITH 
THE LOGICAL OPERATORS ("+"FOR "OR"AND"&"FOR "AND") 



THE METHOD ASSOCIATES THE 
ACCESS SCOPE SENTENCE WITH 
THE ACCESSOR 
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400 



Fig.4H. 



A USER LOGS ON TO A COMPUTER AND FINDS A PIECE OF 
CONTENT USING A DIRECTORY OR UNIVERSAL DESCRIPTION, 
DISCOVERY, AND INTEGRATION WEB SERVICE (UDDI) 
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IS THE 
PIECE OF CONTENT 
ACCESSIBLE BY A 
JVEB SERVICE?, 



-YES-*(e2^ 



NO 

i 



A USER REQUESTS ACCESS TO A PIECE OF CONTENT (E. G., BY 
DOUBLE-CLICKING A USER INTERFACE REPRESENTATION OF 
THE PIECE OF CONTENT, SUCH AS A FILE ICON) 










THE METHOD COLLECTS ONE OR MORE 
ACCESSOR'S ACCESS SCOPE SENTENCES 
ASSOCIATED WITH THE USER FOR EVALUATION 


P476 










THE METHOD COMPILES (IF NECESSARY) THE 
ACCESSOR'S ACCESS SCOPE SENTENCES (SEE 
PROCESSING STEPS 464-466) 


p478 
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THE METHOD COLLECTS ONE OR MORE ACCESS 
SCOPE SENTENCES ASSOCIATED WITH THE PIECE 
OF CONTENT TOR EVALUATION 
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THE METHOD COMPILES (IF NECESSARY) THE 
ACCESS SCOPE SENTENCES FOR THE PIECE OF 
CONTENT (SEE PROCESSING STEPS 464-466) 
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IS THERE 
AN ACCESS DIMENSION 
NOT USED BY BOTH THE 
ACCESSOR AND THE PIECE 
OF CONTENT? 



NO-*{e4^ 



YES 
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THE METHOD SUPPLANTS THE MISSING BINARY PHRASE WITH A BINARY 
PHRASE FILLED WITH l'S .(THE NUMBER OFl'S CORRESPONDS TO THE 
NUMBER OF MEMBERS IN THE ACCESS DIMENSION) 



EACH BINARY PHRASE OF THE ACCESSOR IS LOGICALLY 
"ANDED" WITH EACH CORRESPONDING BINARY PHRASE OF THE 
PIECE OF CONTENT, FORMING AN EVALUATED BINARY PHRASE 
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FigAJ. 
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YES 



± 



ACCESS TO THE PIECE OF CONTENT IS GRANTED 
TO THE USER ASSOCIATED WITH THE ACCESSOR 
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494 



YES 



NO 




ACCESS TO THE PIECE OF CONTENT IS DENIED 
TO THE USER ASSOCIATED WITH THE ACCESSOR 
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THE PIECE OF CONTENT USES UDDI TO FIND A 
COMPILER WEB SERVICE TO COMPILE ACCESS SCOPE 
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THE PIECE OF CONTENT USES UDDI TO FIND 
AN EVALUATORWEB SERVICE TO EVALUATE 
ACCESS (SEE PROCESSING STEPS 474-496) 
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